| Previous | Next |
| CO_E_RUNAS_VALUE_MUST_BE_AAA | APPX_E_PACKAGING_INTERNAL |
CO_E_ELEVATION_DISABLED
CO_E_ELEVATION_DISABLED — 0x80080017
CO_E_ELEVATION_DISABLED means the client requested elevation, but the class registration does not explicitly enable the elevation moniker contract.
Start with the failing layer
A missing display name or incompatible RunAs produces separate codes after the class has otherwise participated in elevation.
Preserve before retrying
- HKLM CLSID Elevation\Enabled value and registry view
- LocalizedString, optional IconReference, component signature, and AppID mapping
- The exact moniker level and CLSID requested by the client
- Whether the class was installed per-user, which elevated activation does not use
Three useful comparisons
- Verify normal non-elevated activation before changing elevation metadata.
- Enable elevation only in a test installation and inspect the UAC prompt identity.
- Request the narrow privileged operation from a standard-user client.
A defensible fix
Apply the smallest change that addresses the first rejected condition: Opt in only classes designed for a small privileged surface, install their metadata machine-wide, and secure every exposed method.
Close the incident only when the approved operation prompts and succeeds, non-approved callers are rejected by method-level authorization, and per-user registration is not relied upon.
Technical references
These references define the HRESULT family and subsystem contract used above:
Looking for a different code? Search another status or error code.